sushi-ens[.]top

Analysis of sushi-ens.top indicates it is a deliberately crafted crypto‑related scam that was taken offline shortly after detection. The domain was registered on February 21, 2026 and immediately began impersonating SushiSwap, as reflected in the page title "Stake SUSHI | Sushi". The site used an SSL certificate rated R10, but the associated Gridinsoft trust score was 0 out of 100, suggesting a lack of reputable security posture. Network resolution shows the domain pointing to IP address 107.172.83.150, which is hosted in the United States under AS36352 (HostPapa).

VirusTotal scans recorded two positive detections out of 93 participating security vendors, confirming that at least a subset of industry tools flagged the site as malicious. Additionally, the domain appears on a single public blocklist and has been actively blocked by the PhishDestroy mitigation service. The overall classification aligns with a crypto scam, specifically targeting users of the SushiSwap platform.

While the exact page contents have not been captured, the combination of brand impersonation, low trust scores, and vendor detections provides sufficient evidence for defensive action. Defenders should immediately add sushi-ens.top to URL filtering and DNS sinkhole rules, ensure endpoint protection solutions are updated to block the domain, and monitor for any related infrastructure that may share the same IP range or hosting provider. Ongoing vigilance is advised to detect potential re‑use of the domain or creation of similar impersonation sites, especially given the rapid turnover observed in recent crypto‑focused threat campaigns.